CVE-2022-4033
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
Résumé
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than the specified value (i.e. a number, file path, etc..). This makes it possible attackers to submit values other than the intended input type.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory wordfence.com
- web plugins.trac.wordpress.org
- web wordfence.com